How to Configure JumpServer OIDC SSO with Microsoft Azure Entra ID
Step-by-step guide to integrating JumpServer with Microsoft Azure Entra ID (Azure AD) using OpenID Connect (OIDC) for enterprise single sign-on.
Secure Every Privileged
Access. Period.
Trusted by over 3,000 enterprises to secure critical infrastructure. Go from zero to production in 30 minutes and scale effortlessly from a single server to unlimited assets.
30k+
GitHub Stars
500k+
Deployments
3,000+
Enterprise Customers
Global Adoption
Trusted by Global Leaders
From manufacturing and finance to internet and energy — JumpServer secures privileged access for teams worldwide.
What Customers Say
Real outcomes from production deployments — from distributed manufacturing to large-scale media and finance.
“Enabled a distributed deployment model with multi-organization governance — keeping privileged access controlled across factories and regions.”
Canadian Solar
Photovoltaic manufacturing
“Established a more flexible and self‑controlled security operations auditing system — making access governance easier to operate at scale.”
Tencent Music Entertainment
Media & entertainment
“We migrated from a legacy PAM and reduced licensing costs by 90%. The open-source model gives us full transparency and the deployment took less than a day.”
Infrastructure Lead
Fortune 500 Financial Services
Why Teams Choose JumpServer
Three pillars that make JumpServer the preferred PAM solution for security-conscious enterprises.
Open Source & Transparent
100% open-source code on GitHub under the GPL-3.0 license. No black-box algorithms, no vendor lock-in. Audit every line of code yourself.
- Full source code access
- Active community governance
- Self-hosted deployment
Deploy in 30 Minutes
One-line Docker Compose deployment. No dedicated consultants needed. Get production-grade PAM running before lunch break.
- Single docker-compose up
- Kubernetes Helm charts
- Zero external dependencies
Enterprise-Grade Security
SOC 2 aligned architecture. Full session recording, RBAC, just-in-time access, and real-time threat detection built into every layer.
- Full session recording
- Command filtering & blocking
- Real-time alert system
Four Pillars of Privileged Access
A complete PAM toolkit covering the full lifecycle of privileged credentials.
Multi-Layer Identity Verification
Every access request starts with robust identity verification. Integrate with your existing IdP, enforce MFA, and support all major enterprise protocols.
- LDAP / AD integration and automatic sync
- SSO via OIDC, OAuth2, SAML 2.0, CAS
- TOTP / WebAuthn MFA enforcement
- Login IP whitelist & time window restriction
Fine-Grained Access Control
Role-based access control with asset-level permissions. Implement least-privilege policies and just-in-time access approval workflows.
- RBAC with customizable role hierarchy
- Asset-level permission granularity
- Just-in-time access with time-boxed approval
- Multi-level approval workflow
Centralized Credential Lifecycle
Automate password rotation, manage privileged accounts across Linux, Windows, databases, network devices, and cloud platforms from a single vault.
- Automated password rotation & policy
- Multi-cloud asset auto-discovery
- Encrypted credential vault
- SSH key & certificate management
Complete Audit Trail
Record every privileged session from login to logout. Full command history, keystroke logging, and video playback for complete accountability.
- Full session video recording & playback
- Command-level filtering & search
- Real-time command interception
- Compliance-ready audit reports
Connect Everything. Manage Every Protocol.
JumpServer supports all major protocols for connecting to any asset type in your infrastructure.
SSH
Linux / Unix / network devices
Windows
Browser or native RDP access
Databases
MySQL, Oracle, SQL Server, PostgreSQL
Kubernetes
Connect to Pods in K8s clusters
Web Apps
Web management portals
Remote App
Microsoft RemoteApp connections
Plus VNC, Telnet, MongoDB, Redis, ClickHouse, and more.
Choose Your Edition
From open-source community to enterprise-grade support — JumpServer fits every organization.
Traditional PAM
CyberArk / Thycotic
- $30,000+ annual licensing
- 3-6 month deployment cycle
- Closed source, black box
- Vendor lock-in risk
Open Source
Community Edition
Free forever
- Up to 5,000 assets
- All core PAM features included
- 100% open source
- Community support
Recommended
Premium
Enterprise Edition
Scale-based subscription
- Everything in Community
- Enterprise features
- Active-Standby & HA cluster
- Dedicated support & SLA
Enterprise X-Pack Enhancements
JumpServer Enterprise Edition offers exclusive features compared to the Community Edition.
Multi-Organizations
Supports resource isolation with multi-tenant architecture.
Role-Based Access Control
Assign permissions to users based on their role within an organization.
Single Sign-On (SSO)
Supports Active Directory / LDAP, SAML2, OAuth2, and OAuth/OpenID Connect.
Multi-Cloud Asset Synchronization
Supports automatic discovery and collection, plus automatic credential updates.
Account Automation
Automates account discovery, credential collection, and rotation policies.
More Databases Support
Supports Oracle, SQL Server, and additional enterprise database platforms.
Remote Application Access
Connect assets using Microsoft Remote Applications through the browser.
Ticket Management
Use tickets to approve user login and asset access requests.
Custom Theme
Customize theme colors, product logo, and branded UI elements.
Community Edition
Deploy the open-source edition with Docker in 30 minutes. Free forever.
Download CommunityEnterprise Edition
Get HA, multi-tenancy, audit compliance, and dedicated support for your team.
Request Free TrialLatest Articles
View all blog posts →
How to Manage VNC Remote Desktop Access for Windows and Linux with JumpServer
A step-by-step guide to managing VNC remote desktop access for Windows and Linux assets using JumpServer, the open-source PAM platform. Covers TightVNC setup on Windows, TigerVNC configuration on Linux (CentOS), and centralized access governance.
How to Configure JumpServer Virtual Applications: Integrated vs. External Deployment
Learn how to configure JumpServer Virtual Applications step-by-step using either Integrated or External Deployment modes, and give your users browser-based access to privileged desktop apps through the Web Terminal.